Modules
Hardware-backed digital signatures for Elixir, via PKCS#11.
Configuration schema and validator for pkcs11ex.
Library exception used for !-variant raises and for configuration failures
that prevent the OTP application from starting.
Convenience wrapper around SignCore.JWS pre-configured with the
PKCS#11 signer. Supports both detached (RFC 7797, default) and
attached (RFC 7515) JWS via the attached: true opt; supports
optional :x5c when a kid extra-header is supplied (verifier
resolves the cert via :kid_certs).
Convenience wrapper around SignCore.PDF pre-configured with the
PKCS#11 signer.
PIN-handling helpers.
Read-only loader for PKCS#12 (.p12 / .pfx) bundles.
A parsed PKCS#12 bundle.
PKCS#11 implementation of the SignCore.Signer protocol.
Public operational surface for configured slots.
Round-robin dispatcher for multi-session slot pools.
GenServer that owns a single slot's PKCS#11 module + persistent session.
Backwards-compat alias for SignCore.X509. The struct, types,
and functions live in sign_core post-monorepo-split; this module
re-exposes them under the historical Pkcs11ex.X509 name so
callers don't have to update their alias lines.
Convenience wrapper around SignCore.XML pre-configured with the
PKCS#11 signer. Same shape as Pkcs11ex.PDF.
Mix Tasks
Imports the private key + leaf certificate from a PKCS#12 (.p12 / .pfx)
bundle into a configured PKCS#11 slot.